Privacy Policy

G2O Software LLC ("G2O Software," "G2O," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information through the G2O Software corporate website, Hearts Ultimate, and related services that link to this policy. G2O Software LLC is the controller of personal information it processes for its own purposes.

1. At a glance

• You can use the website and play the core game without giving G2O your name, home address, contacts, photos, audio, or precise location.
• Information such as settings, saved games, detailed gameplay statistics, and Awards progress generally stays on your device unless a feature described below transmits it.
• Optional analytics is off unless you affirmatively choose Share Analytics. You can turn it off later without losing access to the game or purchases.
• We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or track you across other companies' apps or websites.
• We use a limited pseudonymous record to restore the three theme packs selected with a verified Pick Any 3 purchase. "Pseudonymous" does not mean anonymous, so we treat that record as personal information.

2. Scope and third-party references

This policy applies to the G2O Software corporate website, the Hearts Ultimate iOS app, and any G2O service that links to it. A product-specific notice controls if it expressly states that it replaces or supplements this policy.

Hearts Ultimate is intended for people age 13 or older and is not directed to children under 13. Additional information about younger users appears below.

Independent fan themes and third-party references

References in our applications, including in the B10 Fan Club and SEC Superfans themes, to third-party names, trademarks, teams, conferences, universities, athletic organizations, or other properties are for identification and expressive purposes only. Our applications are independent works and are not affiliated with, sponsored by, approved by, or endorsed by any referenced university, athletic conference or organization, team, or trademark owner. Third-party names and marks remain the property of their respective owners.

3. Information we handle

Corporate website

This static website does not provide user accounts, payment processing, advertising trackers, or a contact form. We do not place client-side cookies or use local storage on this site. Our hosting and security providers may process ordinary request information, such as an IP address, browser and device type, requested page, referring page, and date and time, to deliver and protect the site. Other parties are not permitted by us to collect personal information on this site for cross-site tracking.

Information stored on your device

The app stores information such as your optional profile name, settings, saved games, detailed gameplay statistics, Awards progress, privacy choices, and cached purchase status on your device so it can provide its features. G2O does not receive information that remains on your device. Local information generally remains until you reset it, delete the app, or the operating system removes it.

Deal-verification data

After a hand ends, Table Info can create a verification record containing the deal algorithm, hand identifier, cryptographic commitment, revealed random seed, and deck order. The record does not contain your name or Game Center identity. It leaves the app only if you choose Copy Deal Data and then paste or share it somewhere. G2O does not automatically receive it.

Apple services

• StoreKit: Apple processes in-app purchases and supplies verified product, transaction, and entitlement information that the app uses to unlock or restore purchased content. G2O does not receive your full payment-card number.
• iCloud: If available, Apple's iCloud key-value service may sync a random app-account identifier and the identifiers of the three theme packs selected for Pick Any 3. G2O does not operate or access your personal iCloud account.
• Game Center and GameKit: If you use these features, Apple may provide your Game Center display name, alias, and game player identifier and may process multiplayer communications. The app uses this information for the features you request. G2O does not send your Game Center identity to its own analytics or cloud-restoration service.

Apple processes information under its own terms and privacy policy.

Pseudonymous Pick Any 3 restoration record

The app creates a random app-account UUID. It is not your Apple ID or Apple's advertising identifier (IDFA). The app may store this UUID locally, sync it through iCloud where available, and provide it to Apple as a StoreKit app account token so a verified transaction can be associated with the same app account.

When the G2O cloud-restoration feature is enabled, we use Microsoft Azure to store a small JSON record associated with the random app-account UUID or another verified purchase identifier. The record contains a schema version, the StoreKit product identifier, the identifiers of the three theme packs you selected, and the selection date and time. It is used to restore those selections after reinstalling the app or moving to another compatible device. The record does not contain your name, email address, Apple ID, Game Center identity, payment-card number, saved games, or detailed gameplay history.

Apple's verified StoreKit entitlement remains authoritative. The Azure record identifies the three selected packs but does not independently establish that a purchase is valid. Normal network requests to this service may also generate limited security logs containing an IP address, request time, response status, and similar technical information.

This cloud feature applies only to app versions in which it is enabled. Until then, the app relies on StoreKit and, where available, iCloud and does not upload this JSON record to Azure.

Optional analytics

When G2O analytics is enabled in a released app version, the app asks whether you want to share pseudonymous gameplay statistics. We collect this information only after you affirmatively choose Share Analytics. Depending on the version and features used, it may include app and operating-system version, general device category, games and hands played, features used, theme popularity, broad customer type such as free or paid, and performance, error, or crash information. It does not include your name, email address, Apple ID, Game Center identity, IDFA, contacts, photos, audio, precise location, or payment-card information.

Analytics records may be associated with an app-generated identifier so events can be counted accurately over time. Although direct identity fields are excluded, those records are pseudonymous rather than anonymous and are treated as personal information. We do not use them to identify you or track you across other apps or websites.

You can decline analytics without affecting gameplay, purchases, or restoration. You can also turn off Share Analytics in the app's settings at any time. Turning it off stops future analytics collection but does not automatically delete information already collected; you may request deletion as described below. Data strictly needed for purchase verification and Pick Any 3 restoration is separate from optional analytics and may continue to be processed when analytics is off.

Communications and support

If you contact us, we receive the information you choose to provide, such as your email address, name, message, support details, and attachments. Please do not send passwords, full payment-card information, or other sensitive credentials. Your email provider processes your message under its own terms and privacy practices.

4. Purposes and legal bases

We use information only for the purposes described in this policy, including to:

• provide requested website and app features, verify entitlements, and restore the three packs selected with a Pick Any 3 purchase;
• provide support and respond to communications and privacy requests;
• measure and improve app reliability, usability, balance, and content when you have chosen to share analytics;
• detect, investigate, and prevent fraud, abuse, security incidents, and technical failures;
• maintain appropriate business and compliance records; and
• comply with law and protect the rights, safety, and integrity of G2O, our users, and others.

Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract or steps you request before entering one for app functionality and purchase restoration; your consent for optional analytics; our legitimate interests in securing, maintaining, and improving our services and responding to non-contractual communications, where those interests are not overridden by your rights; and compliance with legal obligations. We may also process information to establish, exercise, or defend legal claims. You may withdraw analytics consent at any time, without affecting processing that occurred before withdrawal.

5. How we disclose information

We disclose only what is reasonably necessary for the relevant purpose:

• Service providers: Microsoft Azure may host the cloud-restoration record, optional analytics, and related security logs. Website hosting, email, security, and technical-support providers may process information for their respective services. We require service providers to process personal information for defined purposes and subject to appropriate confidentiality, privacy, and security obligations.
• Apple: Information is processed through StoreKit, iCloud, Game Center, GameKit, and other Apple services as described above. Apple acts under its own terms and privacy practices for services it controls.
• Legal and safety: We may disclose information when reasonably necessary to comply with law or legal process; enforce our rights; or protect the rights, safety, and security of G2O, users, or others.
• Business transaction: Information may be disclosed as part of a proposed or completed merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.
• Professional advisers: Lawyers, accountants, auditors, and insurers may receive limited information when reasonably necessary to provide professional services.

We do not sell personal information or share it for cross-context behavioral advertising. We do not disclose personal information for targeted advertising, and we do not use personal information for profiling that produces legal or similarly significant effects.

6. Retention

We keep personal information only as long as reasonably necessary for the disclosed purpose, considering the amount, nature, and sensitivity of the information; the risk of harm; applicable legal requirements; and whether the purpose can be achieved another way.

• Device information: Local app information remains until you reset it, delete the app, or the operating system removes it.
• Restoration records: A Pick Any 3 record is kept while the associated purchase remains eligible for restoration and G2O continues to support the app or restoration service, unless you request deletion and no exception applies. Backup copies are removed on their normal secure-deletion cycle.
• Optional analytics: Pseudonymous event-level analytics is retained only as long as needed to evaluate product performance and trends, troubleshoot issues, and maintain the integrity of the metrics. We then delete or aggregate it. Aggregated or de-identified information that can no longer reasonably be linked to a person may be retained longer.
• Technical logs: Logs are kept for the period reasonably necessary to operate and secure the service or investigate an incident.
• Communications: Support and privacy correspondence is kept as long as needed to respond, maintain appropriate records, resolve disputes, or meet legal obligations.

If we de-identify information, we take reasonable measures to prevent it from being associated with a person or household, publicly commit to maintain and use it in de-identified form, and do not attempt to re-identify it except to test whether our de-identification measures work as permitted by law.

7. Your privacy rights and choices

Depending on where you live and subject to applicable exceptions, you may have the right to confirm whether we process your personal information; access or obtain a copy; correct inaccuracies; delete information; receive portable information; restrict or object to certain processing; withdraw consent; opt out of sale, targeted advertising, or certain profiling; limit certain uses of sensitive information; and appeal our decision on a request. You also have the right not to receive discriminatory treatment for exercising an applicable privacy right.

G2O does not currently sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or conduct profiling that produces legal or similarly significant effects. We also do not knowingly collect sensitive personal information through the services covered by this policy. Accordingly, we do not offer separate links to opt out of those practices. A purchase price or access to paid content is payment for the product or feature and is not a financial incentive offered in exchange for personal information.

To exercise a privacy right, email privacy@g2osoftware.com with the subject Privacy Request and describe your request. We may ask for information reasonably necessary to locate the relevant record and verify that you are the person associated with it, such as the app-generated identifier or limited purchase details. We will not require more information than reasonably necessary for verification. If we deny a request, residents with an applicable right to appeal may reply with the subject Privacy Appeal. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and verification of the consumer's identity.

Deleting an Azure restoration record does not cancel or revoke the underlying App Store purchase, which is controlled by Apple, but it may prevent us from recovering the exact three theme packs you previously selected. You may need to select three packs again after restoration. Turning off analytics stops future optional collection. You can reset local gameplay statistics in the app and delete other local information by using available controls or deleting the app.

Browser privacy signals

Because the corporate website does not sell or share personal information, use targeted advertising, or permit third-party cross-site tracking, a browser's Do Not Track signal does not change the site's practices. We honor legally recognized opt-out preference signals, such as Global Privacy Control, when they apply to a processing activity.

8. Regional disclosures

California and other U.S. states

For purposes of the California Consumer Privacy Act, as amended, and similar U.S. state laws, the categories of personal information we may collect are:

• Identifiers: a random app-account UUID, IP address and request identifiers, and any name or email address you provide in a communication;
• Customer records and correspondence: contact information, messages, attachments, support details, and other information you choose to send us;
• Commercial information: StoreKit product and entitlement information, the identifiers of the three theme packs selected, and the selection date;
• Internet or other electronic network activity: website request information, app and operating-system version, general device information, security logs, and pseudonymous gameplay, feature-use, theme-popularity, performance, error, and crash metrics when optional analytics is enabled.

We collect these categories from you, your device or app, Apple services involved in the features you use, and our service providers. We use them for the purposes described in Section 4. We may disclose them for business purposes to the categories of recipients in Section 5. During the preceding 12 months, we have not sold or shared personal information, including personal information of consumers under 16, and we have not used or disclosed sensitive personal information for purposes that require a right to limit under California law.

European Economic Area, United Kingdom, and Switzerland

If applicable law gives you these rights, you may request access, correction, deletion, restriction, or portability of your personal information; object to processing based on legitimate interests; and withdraw consent. You may also lodge a complaint with the data-protection authority where you live, work, or believe a violation occurred.

G2O is based in the United States. Information processed by G2O or its providers may be transferred to and processed in the United States or other countries whose laws may differ from those where you live. Where required, we use a legally recognized transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses, or the applicable United Kingdom addendum, together with supplementary safeguards where appropriate.

9. Age 13 and older

Hearts Ultimate is intended for people age 13 or older. The website, app, and related services are not directed to children under 13, and G2O does not knowingly collect personal information from a child under 13. A person under 13 should not use the app or send personal information to G2O. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it. A parent or guardian may contact us at privacy@g2osoftware.com.

We do not knowingly sell or share the personal information of users under 16, use it for targeted advertising, or profile younger users for legal or similarly significant decisions. Where we know that a user is below the age at which they may provide valid consent under local law, we will not collect optional analytics on the basis of that user's consent unless legally valid authorization from a parent or guardian has been obtained.

10. Information security

We use reasonable administrative, technical, and organizational safeguards designed to protect information in our possession. The Azure-backed service is designed to minimize the information collected, restrict access to authorized personnel and systems, and protect information in transit and at rest. Pseudonymous identifiers and limited records reduce risk but do not eliminate it. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy as our website, apps, services, or legal requirements change. We will post the revised policy on this page and update the effective date. If a change materially affects how we use information already collected, we will provide any additional notice or obtain consent required by law.

12. Contact us

For questions, concerns, or requests related to this Privacy Policy or G2O's information practices, contact:

G2O Software LLC
Privacy: privacy@g2osoftware.com
App support: support@g2osoftware.com
United States